I think it's a starting point for me to go by. I'm an AD newbie and DNS rookie so I don't completely understand the root and production. I assumed you needed one domain for internal. My only comparison to all this is the Novell 4.x NDS.
-----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Friday, March 28, 2003 4:48 AM To: NT 2000 Discussions Subject: RE: DNS Planning and Design for AD I'm not sure I understand your question, but here goes. Rather than running split brained DNS (which we can easily do), one of our design criteria was to dissociate the AD domains from the company name. Internally we purchased a relatively generic pair of domains - matching .com and .net domains to be precise - and use .net for the root and .com for the production. These names have abosolutely NOTHING to do with the company name[1]. All internal systems fall into one of those two domains. Externally - in other words anything that is publicly exposed, is in inovisinc.net. This includes all DNS, mail and proxy hosts, but not our web servers (they're hosted by a third party). Our MXs are ns1.inovisinc.net through ns4.inovisinc.net, and each of them should at this point reverse correctly. Our internal mail relays, which are referenced by our internal domain name, all have valid reverse DNS entries pointing to inovisinc.net addresses. Clear as mud? -------------------------------------------------------------- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. [1] Too many bad experiences with mergers over the last 3 years. > -----Original Message----- > From: Robert Gonzaga (306) [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 27, 2003 3:12 PM > To: NT 2000 Discussions > Subject: RE: DNS Planning and Design for AD > > > If you have different names in the inside, what happens with > your mail server when they do a reverse DNS on it? > > -----Original Message----- > From: Roger Seielstad [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 27, 2003 8:08 AM > To: NT 2000 Discussions > Subject: RE: DNS Planning and Design for AD > > It really doesn't matter how you set up DNS, as long as its > set up correctly. I think its important to spend the $35 a > year and register the domain with the Internic, however, and > avoiding the use of .local, .ms, or other non-real top level domains. > > We chose the empty root design, and have 2 discontiguous > domains in use. > > -------------------------------------------------------------- > Roger D. Seielstad - MCSE > Sr. Systems Administrator > Inovis Inc. > > > > -----Original Message----- > > From: Robert Gonzaga (306) [mailto:[EMAIL PROTECTED] > > Sent: Thursday, March 27, 2003 11:00 AM > > To: NT 2000 Discussions > > Subject: RE: DNS Planning and Design for AD > > > > > > From the little that I've already read from MS, they like > > subdomains. Is there another choice? Does everybody do it > > this way? I thought a read thread a while back about using > .local... > > > > Thanks I well read your link. > > > > -----Original Message----- > > From: Lum, David [mailto:[EMAIL PROTECTED] > > Sent: Thursday, March 27, 2003 7:55 AM > > To: NT 2000 Discussions > > Subject: RE: DNS Planning and Design for AD > > > > Try this link: > > > http://www.microsoft.com/technet/treeview/default.asp?url=/tec > hnet/prodtechn > ol/ad/default.asp > > Dave Lum - [EMAIL PROTECTED] > Sr. Network Specialist - Textron Financial > 503-675-5510 > > > -----Original Message----- > From: Robert Gonzaga (306) [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 27, 2003 07:46 AM > To: NT 2000 Discussions > Subject: DNS Planning and Design for AD > > > I'm finally starting down the road to AD whether my manager > likes it or not but before that I need get my internal DNS > services setup or at least designed. Does anybody have any > links on how to design and implement? What are the different > schools of thought on this? > > TIA > Robert G > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > > ------ > You are subscribed as [EMAIL PROTECTED] > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe send a blank email to %%email.unsub%% > ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
